9/18/2018 8:36 AM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Upgrade your AWS skills to Azure 9/18/2018 8:36 AM BRK2041 Upgrade your AWS skills to Azure © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Port your AWS Knowledge and Experience 9/18/2018 8:36 AM Port your AWS Knowledge and Experience © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

9/18/2018 8:36 AM Azure Regions 42 Regions Worldwide, 36 Online…huge capacity around the world…growing every year 2.5x AWS, 7x Google DC Regions 130 Edge PoPs with 2,500 Unique Partners 1.6 Pbps of inter-datacenter bandwidth China Operated by 21Vianet Germany Trustee: Deutsche Telekom Azure Government (US & DoD) © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

AWS Regions and Availability Zones 9/18/2018 8:36 AM AWS Regions and Availability Zones 16 Geographic Regions Worldwide…Comprised of 61 Availability Zones, 44 Online https://aws.amazon.com/about-aws/global-infrastructure © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Azure & AWS Datacenters 9/18/2018 8:36 AM Azure & AWS Datacenters A region is a massive Microsoft owned and purpose built Datacenter A region is a collection of distributed Amazon owned & Colocation Datacenters Regions Hardware and software HA including physical connections to the power grid & telecom providers Hardware and software HA including physical connections to the power grid & telecom providers Redundancy Availability & Connectivity Regions deployed in pairs Availability Zones in Preview Region to Region traffic via Microsoft Backbone Regions not deployed in pairs Extensive Availability Zones Region to Region traffic via the Internet © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Terminology Mapping Description Microsoft Azure Amazon Web Services Billing container Subscription Account Security Principal Account Admin / Global Admin Root Account Access Control Role Based Access Control (RBAC), Polices & Locks Identity and Access Management (IAM), Config, CloudTrail & Service Catalog Directory Service Azure Active Directory (AD) IAM & AWS Directory Service Geo locations Region User Interfaces Azure Portal Management Console Management & Monitoring Azure Monitor, Application Insights, Log Analytics, Network Watcher & Security Center Cloud Watch, EC2 Systems Manager Infrastructure as Code Azure Resource Manager (ARM) & Azure Automation Cloud Formation & OpsWorks Grouping Mechanism Resource Groups Automation Azure SDK, PowerShell & CLI AWS SDK, PowerShell & CLI © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Azure Government Services Available 9/18/2018 8:36 AM Azure Government Services Available Datacenter infrastructure Infrastructure services Platform services Compute Compute Media Service Fabric Media Services Virtual Machines VM ScaleSets Batch Azure App Service Data Developer Services US Gov. IA Storage US Gov. VA HD Insight SQL Database Redis Cache Cosmos DB Azure SDK US DoD Central BLOB Storage Azure files Integration Web & mobile Premium VM Storage US DoD East Notification hubs US Gov. AZ Storage Queues Service Bus Mobile Apps US Gov. TX Networking Hybrid operations Virtual Network Express Route Azure Monitoring Backup StorSimple Azure Site Recovery Log Analytics Operational Announced/Not Operational Security & management Load Balancer Traffic Manager Active Directory Multi-Factor Authentication Key Vault Portal Automation https://azure.microsoft.com/en-us/overview/clouds/government/ © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

AWS GovCloud Available Services 9/18/2018 8:36 AM AWS GovCloud Available Services Datacenter infrastructure Infrastructure services Platform services Compute Compute Media EC2 ELB Auto Scale EMR Lambda Data Developer Services Storage Dynamo DB ElastiCache RDS RedShift SDK S3 Import/Export Snowball Glacier Integration Web & mobile Ebs SQS SWF SNS Networking Hybrid operations VPC Direct Connect Operational Announced/Not Operational Security & management Load Balancer Management Console IAM Cloud HSM AWS KMS Cloud Watch Cloud Formation Cloud Trail http://docs.aws.amazon.com/govcloud-us/latest/UserGuide/supported-services.html © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Availability & Billing 9/18/2018 8:36 AM Pricing & Billing Availability & Billing Global availability & Billing support in 24 Currencies Global availability, some Billing support in other currencies (credit card) By the minute (rounding down) By the second Billing Interval All Data going into an Azure Datacenter is free, while egress Data has a fee All Data going into an AWS Datacenter is free, while egress Data has a fee Data Charges © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Subscription & Purchasing Options 9/18/2018 8:36 AM Pricing & Billing Subscription & Purchasing Options Pay-As-You-Go, Pre-Purchase with EA, Cloud Solution Providers (CSP), Low-Priority VMs, Reserved Instances On-Demand, Reserved Instances, Spot Instances or Dedicated Hosts Service Provider Licensing, BYOL, Hybrid Use Benefits allows for running Windows VMs on Azure for Base Computing Price if Customer has Software Assurance Service Provider License & BYOL Software Licensing Thousands of On-Demand solutions with Metered Licenses Marketplace Thousands of On-Demand solutions with Metered Licenses © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

https://azure.microsoft.com/en-us/pricing/calculator 9/18/2018 8:36 AM Pricing Calculators https://azure.microsoft.com/en-us/pricing/calculator http://calculator.s3.amazonaws.com/index.html © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Management Portals portal.azure.com aws.amazon.com/console/ © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Active Directory Integration 9/18/2018 8:36 AM Identity Active Directory Integration Synchronize On-Premises AD (500K Users), ADFS & Domain Services AWS Directory Service (100K Users), but not AD Synchronized Role Based Access Control & Custom Roles Not AD Integrated Cloud Access Control Role Based Access Control & Custom Roles AD Integrated Extend Identity to Internet with Same-Sign on Multi-factor Authentication Multi-Factor Authentication, but only for AWS Apps Cloud Identity © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Hybrid Identity with Azure Active Directory 9/18/2018 8:36 AM Hybrid Identity with Azure Active Directory Benefits Users only have to manage one identity One identity to manage from one location Custom LOB Apps Enterprise Hybrid Identity Office 365 AD Azure AD Synchronize Identities © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Azure & AWS IaaS Services 9/18/2018 8:36 AM Azure & AWS IaaS Services Networking Storage Compute © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Azure & EC2 VMs Virtual Network Public IP Virtual Private Cloud 9/18/2018 8:36 AM Virtual Network Public IP Virtual Private Cloud Elastic IP Azure Load Balancer (external) Elastic Load Balancer (external) Subnet AV Zone AV Zone Subnet Auto Scaling Group Network Security Group Security Group Scale Set Elastic Load Balancer (internal) Azure Load Balancer (internal) AV Zone AV Zone Subnet Subnet Network Security Group Security Group Availability Set Azure Storage: Premium (SSD) or Standard Disk Format: Fixed VHD – Max 1 TB per disk Span disks for larger volumes (up to 64 TB) EBS Volumes: Provisioned IOPs, General Purpose SSD, or magnetic. AMI Format, up to 16 TB per Volume © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Networking

Virtual Networks & VPCs at a Glance 9/18/2018 8:36 AM Virtual Networks & VPCs at a Glance Cloud Network Azure Virtual Network Virtual Private Cloud VPN Gateway VPN Gateway VPN High-speed Connectivity ExpressRoute AWS Direct Connect © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Virtual Networks & VPCs 9/18/2018 8:36 AM Virtual Networks & VPCs Public or Private Addresses Subnets internet reachable by default Custom Routing VNet Peering within Region Public or Private Addresses Subnets require NAT Gateway to reach Internet Custom Routing VPC Peering within Region Address Spaces & Subnets Network Security Groups can be associated to Subnet and/or Network Interfaces Security Groups for Subnets ACLs for VMs Network Filtering Point to Site VPN Site to Site VPN Cloud WAN 35+ locations (Up to 10Gbps), with 99.9% SLA Site to Site VPN AWS Direct Connect 60+ locations (Up to 10GBps), but with no SLA Hybrid-Cloud © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Network Security Groups 9/18/2018 8:36 AM AWS using two methods to secure network traffic: Security Groups (Stateful) for Instances and Network ACLs (Stateless) for Subnets. Network Security Groups Enables network segmentation & DMZ scenarios Custom Inbound/Outbound Rules Default Inbound/Outbound Rules Filter conditions with allow/deny Individual addresses, address prefixes, wildcards Choose Service or Custom Protocol/Port Associate with VMs or Subnets Configure via Portal, PowerShell or ARM Internet On Premises 10.0/16 Internet S2S VPNs √ √ √ √ VPN Gateway Backend 10.3/16 Mid-tier 10.2/16 Frontend 10.1/16 Virtual Network © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

35+ ExpressRoute Locations 9/18/2018 8:36 AM 35+ ExpressRoute Locations © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

12+ ExpressRoute Country & Gov’t Locations 9/18/2018 8:36 AM 12+ ExpressRoute Country & Gov’t Locations © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Load Balancing at a Glance 9/18/2018 8:36 AM Load Balancing at a Glance DNS Traffic Manager & Azure DNS Route 53 Azure CDN CDN CloudFront Load Balancer Elastic Load Balancer Load Balancer ELB Application & WAF Application Gateway & WAF © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Environment Virtual Network Address Space: 10.0.0.0/16 9/18/2018 8:36 AM Environment Virtual Network Address Space: 10.0.0.0/16 Allowed via “WEBNSG” Subnet Apps: 10.0.1.0/24 Network Security Groups WEBNSG SRC ADDRESS PREFIX: INTERNET SRC PORT RANGE: * DEST PORT RANGE: 80 DEST ADDRESS PREFIX: 10.0.1.0/24 SQLNSG SRC ADDRESS PREFIX: 10.0.1.0/24 DEST PORT RANGE: 3306 DEST ADDRESS PREFIX: 10.0.2.0/24 Allowed via “SQLNSG” Subnet Data: 10.0.2.0/24 © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

9/18/2018 8:36 AM Storage © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Standard (HDD) or Premium (SSD) 9/18/2018 8:36 AM Storage at a Glance Object Storage Blob Storage S3 Elastic File System EFS File Storage Azure Files Managed & Unmanaged Standard (HDD) or Premium (SSD) Elastic Block Store (EBS) HDD or SSD VM Disks © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Azure VM Service Level Agreements 9/18/2018 8:36 AM Azure VM Service Level Agreements Managed Availability Set SLA options based on Deployment 99.99% when deploying into Availability Zones (in Preview) 99.95% when using multiple VMs and Availability Sets 99.9% when using Single VMs (must use Premium Storage) Compute Fault Domain 0 Compute Fault Domain 1 MD Fault Domain 0 MD Fault Domain 1 Hypervisors Storage Stamps © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Storage at a Glance Data Import & Export Cloud Tier Archive 9/18/2018 8:36 AM Storage at a Glance Data Import & Export Import / Export Service Azure Databox Snowball Snowmobile Cloud Tier Storage Gateway or Partner devices StorSimple or Partner devices Archive Cool Storage & Azure Archive (Preview) Infrequent Access & Glacier © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Environment Virtual Network Address Space: 10.0.0.0/16 9/18/2018 8:36 AM Environment Virtual Network Address Space: 10.0.0.0/16 Allowed via “WEBNSG” Subnet Apps: 10.0.1.0/24 Network Security Groups WEBNSG SRC ADDRESS PREFIX: INTERNET SRC PORT RANGE: * DEST PORT RANGE: 80 DEST ADDRESS PREFIX: 10.0.1.0/24 SQLNSG SRC ADDRESS PREFIX: 10.0.1.0/24 DEST PORT RANGE: 3306 DEST ADDRESS PREFIX: 10.0.2.0/24 Allowed via “SQLNSG” Subnet Data: 10.0.2.0/24 Azure Storage Account © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Compute at a Glance Infrastructure Containers Web Apps 9/18/2018 8:36 AM Compute at a Glance Infrastructure Virtual Machines & Scale Sets EC2 Azure Container Services & Instances Containers Amazon EC2 Container Service Web Apps App Service Elastic Beanstalk © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Compute at a Glance Microservices Serverless No dedicated service 9/18/2018 8:36 AM Compute at a Glance Service Fabric Microservices No dedicated service Functions Lambda Serverless Event Grid © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Environment Virtual Network Address Space: 10.0.0.0/16 9/18/2018 8:36 AM Environment Virtual Network Address Space: 10.0.0.0/16 Allowed via “WEBNSG” Subnet Apps: 10.0.1.0/24 Network Security Groups WEBNSG SRC ADDRESS PREFIX: INTERNET SRC PORT RANGE: * DEST PORT RANGE: 80 DEST ADDRESS PREFIX: 10.0.1.0/24 SQLNSG SRC ADDRESS PREFIX: 10.0.1.0/24 DEST PORT RANGE: 3306 DEST ADDRESS PREFIX: 10.0.2.0/24 APACHEVM1 10.0.1.4 APACHEVM2 10.0.1.5 Azure Load Balancer Allowed via “SQLNSG” Subnet Data: 10.0.2.0/24 Azure Storage Account MYSQL 10.0.2.4 © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Azure Container Services 9/18/2018 8:36 AM Azure Container Services Makes it simple to create, configure, and manage a preconfigured to run containerized applications Deployed using VMs and VM Scale Sets Supports Kubernetes DC/OS Docker Swarm © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

9/18/2018 8:36 AM Service Fabric Build micro-services applications on a cloud native platform using Linux & Windows containers Run a million containers on a single cluster Create clusters with thousands of machines © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Business Continuity & Disaster Recovery (BCDR)

Azure Backup First Party SaaS Service running in Azure 9/18/2018 8:36 AM AWS doesn’t have true backup Service, but rather relies on admin automation of snap shots S3 Azure Backup First Party SaaS Service running in Azure Cost efficient Offsite data protection in Azure for Long Term (99+ years) retention Application aware backups for on-premises servers and Azure VMs Backup workloads including SharePoint, Exchange, SQL Server, and VMWare and Hyper-V hosts Comes with free Azure Backup Server for both Azure IaaS & On-Premises © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Disaster Recovery Microsoft Azure Site Recovery 9/18/2018 8:36 AM Disaster Recovery Microsoft Azure Site Recovery Datacenter to Datacenter Replication & Failover Datacenter to Azure Replication & Failover Azure to Azure Replication & Failover © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Disaster Recovery in AWS 9/18/2018 8:36 AM Disaster Recovery in AWS AWS Supports "Pilot Light" style disaster recovery This is where part of the solution runs in AWS and it is available to scale up if needed for a failure Another approach is a full environment on standby as a hot failover https://aws.amazon.com/disaster-recovery/ In both scenarios, automation replication and connectivity changes to make this type of failover work are left to the User - In other words it is a “Manual” Process. © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Call to Action Get started with Azure for free https://azure.microsoft.com/free Getting started Tutorials for Azure Scenarios https://azure.microsoft.com/en-us/get-started Free Microsoft Training at Microsoft Virtual Academy https://mva.microsoft.com Azure Training from Opsgility www.opsgility.com (use Discount Code TRYOPSGILITY) Training and certification for Azure https://azure.microsoft.com/en-us/community/training/ Azure Documentation https://docs.microsoft.com/en-us/azure/

Please Complete Evaluations Questions? Please Complete Evaluations